1. By: Austen Perelman-Hall COSC 101 Presentation

2.  What is a worm? What is a virus?  What is the Red Worm?  Where did it come from? Causes  Effects  Versions  How to Protect from the Red Worm? Roadmap

3.  Program  Runs independently  Consumes resources of the host from within  Can reproduce complete working versions of itself  Program  Requires human interaction to spread  Usually introduced through email or disks WORMVIRUS

4. Other names: Code Red Worm I- Worm.Bady W32/Bady. worm

5.  Theories: Foshan University in China  A vulnerability in Microsoft Windows IIS  Discovered in the indexing server  A remote attacker connecting to the server can initiate an attack that will overflow the buffer

6. Effects  More then 250,000 systems infected in just 9 hours  caused billions of dollars in damages  introduced the dangers of not reacting quickly to public warnings of vulnerabilities

7.  Code Red Worm I  Code Red v2  Code Red Worm II  Today: a few versions exist  Code Red v2: spread wider but less damage  Ten days after first, scheduled for July 13  Code Red Worm II: targeted Cable and DLS ISP networks  Discovered August 4, 2001  Today:  Each new version is more malicious then the original

8. PROTECTING AGAINST CODE RED WORM  Patch the system with download available from Microsoft  Removing it:  FixCodeRed  CodeRed Scanner  Normal system reboot

9. Conclusion  Red Worm is a malicious and sneaky worm that can be very harmful to your server  It was caused by an unknown source  It had many damaging effects  There have been several versions since the original  There are ways to prevent code red

10. BIBLIOGRAPHY THANK YOU!!! Code Red: The $2bn Worm. Digital image. Web. 01 Dec. 2011.. Computer-virus.jpg. Digital image. Fahmi Rahman. Web. 29 Nov. 2011.. Greenbone_comic_no_worms_here_1885x200. Digital image. Web. 29 Nov. 2011.. Icon-iis.gif. Digital image. GlobalSign. Web. 01 Dec. 2011.. Image_mountaindewcodered1.jpg. Digital image. Web. 28 Nov. 2011. "The Code Red Worm." Hal Berghel Homepage. 11 Sept. 2001. Web. 01 Dec. 2011. http://www.berghel.net/col-edit/digital_village/nov-01/dv_11-01.php. The Mechanisms and Effects of the Code Red Worm. Publication. SANS Institute InfoSec Reading Room, 2001. Web. 29. Nov.2011.. What Is Code Red Worm? Publication. SANS Institute InfoSec Reading Room, 2001. Web. 01 Dec. 2011..